Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/2f490d51-e421-3c64-9a25-80bc7eaebd1e.roa
File:                     2f490d51-e421-3c64-9a25-80bc7eaebd1e.roa (raw, json)
Hash identifier:          UpwfbCG/88NreaCSyfsTVwlHrCA9V57JFsaG3lUYkZU=
Subject key identifier:   4B:0C:51:F8:AE:71:7C:BD:7C:41:5A:F6:02:2F:23:82:69:89:F1:CA
Certificate issuer:       /CN=fc019755-a466-4511-8e5f-83781d1aca46
Certificate serial:       010D0C9F43285849FB58F1CB9F79DF73E718B840
Authority key identifier: 84:FA:EE:9A:A7:8E:05:3C:78:94:E0:09:1F:04:47:CA:FD:2D:B9:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/2f490d51-e421-3c64-9a25-80bc7eaebd1e.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        23.170.184.240/28 maxlen: 28
Validation:               Failed, certificate revoked on Sun 01 Jun 2025 15:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:58:f1:cb:9f:79:df:73:e7:18:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc019755-a466-4511-8e5f-83781d1aca46
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=c00dc106-2114-483b-a4b6-b1e3467070ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:61:3b:2a:eb:d2:fa:27:40:b1:26:a7:75:
                    43:ae:3f:09:c6:b7:42:7b:2c:5b:7e:9a:5b:35:ee:
                    8e:dd:b6:23:9b:4b:71:4c:e0:eb:cf:2b:de:49:8e:
                    43:43:d0:3a:f9:61:c6:97:fb:3e:01:11:02:54:6b:
                    6e:2b:4b:f8:03:c2:1d:20:04:47:ae:d8:04:c3:21:
                    da:56:0b:40:c5:8f:b6:02:d1:e2:98:50:5b:7d:8a:
                    d0:08:8b:94:ec:a9:0b:d3:40:9b:56:63:cc:03:2e:
                    66:43:8f:ca:2b:02:0c:73:65:a4:0f:5d:c2:95:62:
                    01:96:4e:9d:62:2f:65:0b:de:a5:3f:e6:ec:0d:e2:
                    8d:2f:33:9e:12:06:5d:3d:ee:b7:9b:3f:45:c0:c3:
                    8d:55:b8:53:07:57:e8:9e:45:45:f6:ad:4a:dd:eb:
                    c2:99:15:90:2b:36:8a:17:f5:46:60:73:8c:a5:bd:
                    c3:a9:c3:86:c8:03:91:26:af:21:04:07:3e:cf:c3:
                    84:a8:a0:19:d8:38:a1:bc:0a:ae:7d:62:21:72:38:
                    5f:f8:ae:ac:d0:58:24:88:4f:e9:90:76:a1:fe:e6:
                    ac:ae:45:a1:d6:c8:6c:21:14:68:10:00:f7:f7:70:
                    e5:6e:6d:24:66:e3:33:fa:41:41:93:53:8f:c0:8c:
                    7f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0C:51:F8:AE:71:7C:BD:7C:41:5A:F6:02:2F:23:82:69:89:F1:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/2f490d51-e421-3c64-9a25-80bc7eaebd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/fc019755-a466-4511-8e5f-83781d1aca46.crl

            X509v3 Authority Key Identifier:
                keyid:84:FA:EE:9A:A7:8E:05:3C:78:94:E0:09:1F:04:47:CA:FD:2D:B9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.184.240/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:75:11:6b:88:91:fb:0b:b0:e1:3f:b2:ca:23:f2:01:d0:9f:
         33:e4:a3:35:74:4a:1f:76:c6:fa:b0:82:55:dd:fe:fa:7a:a4:
         14:09:1d:3b:ed:5b:b5:21:db:ad:91:9e:09:d4:84:c2:22:12:
         9f:a3:27:e4:58:40:3e:56:27:20:a3:50:f6:0d:c4:6e:84:a7:
         34:45:53:a3:53:26:9d:fe:c3:6f:8a:a9:33:58:68:8a:13:7f:
         95:28:7a:39:8a:2a:dc:14:1b:59:67:61:2f:74:e3:d4:6e:db:
         e0:bf:18:38:75:6a:8c:e5:fc:8d:4f:1b:d5:1f:e6:26:25:a1:
         e7:2a:77:89:16:48:0e:a8:e7:71:13:91:92:26:46:a7:8a:58:
         1c:9f:99:2c:f2:0a:89:cc:ab:7c:3d:63:08:35:30:04:1f:43:
         95:f2:de:5b:ff:c4:03:0e:d2:d5:71:e9:fb:9a:6c:9a:5b:63:
         ef:b1:79:d0:5e:e5:ec:09:2e:dd:4a:35:79:8a:1c:e5:0c:88:
         db:fe:36:bf:25:49:3e:53:36:4c:69:b2:21:e1:5f:7b:6a:66:
         df:4f:25:be:b4:4b:d4:01:49:a2:4b:4c:3d:fa:aa:57:74:33:
         54:0e:67:02:36:99:a9:25:1c:e7:98:3d:ac:bb:3d:39:17:43:
         89:c8:f3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:20:58 2025 by rpki-client